Fixed packages 18
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 5 enterprise_linux:5::client | firefox | 0:45.7.0-2.el5_11 |
| Red Hat · RHEL 5 enterprise_linux:5::client | firefox-debuginfo | 0:45.7.0-2.el5_11 |
| Red Hat · RHEL 5 enterprise_linux:5::server | firefox | 0:45.7.0-2.el5_11 |
| Red Hat · RHEL 5 enterprise_linux:5::server | firefox-debuginfo | 0:45.7.0-2.el5_11 |
| Red Hat · RHEL 6 enterprise_linux:6::client | firefox | 0:45.7.0-2.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::client | firefox-debuginfo | 0:45.7.0-2.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::computenode | firefox | 0:45.7.0-2.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::computenode | firefox-debuginfo | 0:45.7.0-2.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::server | firefox | 0:45.7.0-2.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::server | firefox-debuginfo | 0:45.7.0-2.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | firefox | 0:45.7.0-2.el6_8 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | firefox-debuginfo | 0:45.7.0-2.el6_8 |
| Red Hat · RHEL 7 enterprise_linux:7::client | firefox | 0:45.7.0-2.el7_3 |
| Red Hat · RHEL 7 enterprise_linux:7::client | firefox-debuginfo | 0:45.7.0-2.el7_3 |
| Red Hat · RHEL 7 enterprise_linux:7::server | firefox | 0:45.7.0-2.el7_3 |
| Red Hat · RHEL 7 enterprise_linux:7::server | firefox-debuginfo | 0:45.7.0-2.el7_3 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | firefox | 0:45.7.0-2.el7_3 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | firefox-debuginfo | 0:45.7.0-2.el7_3 |
Vulnerabilities 9
-
Unscored —
Memory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed evidence of memory cor…
-
Unscored —
JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. …
-
Unscored —
Use-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 4…
-
Unscored —
Hashed codes of JavaScript objects are shared between pages. This allows for pointer leaks because an object's address …
-
Unscored —
A potential use-after-free found through fuzzing during DOM manipulation of SVG content. This vulnerability affects Thu…
-
Unscored —
URLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger punycode display, all…
-
Unscored —
WebExtension scripts can use the "data:" protocol to affect pages loaded by other web extensions using this protocol, l…
-
Unscored —
The JSON viewer in the Developer Tools uses insecure methods to create a communication channel for copying and viewing …
-
Unscored —
A use-after-free vulnerability in the Media Decoder when working with media files when some events are fired after the …
References
-
article
https://access.redhat.com/security/updates/classification/#critical
-
article
https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/#firefoxesr45.7
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1415924
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1416271
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1416272
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1416273
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1416274
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1416279
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1416280
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1416281
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1416282
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0190.json
-
report
https://access.redhat.com/security/cve/CVE-2017-5373
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-5373
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-5373
-
article
https://www.mozilla.org/security/announce/2017/mfsa2016-01/#CVE-2017-5373
-
report
https://access.redhat.com/security/cve/CVE-2017-5375
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-5375
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-5375
-
article
https://www.mozilla.org/en-US/security/advisories/mfsa2017-02/#CVE-2017-5375
-
report
https://access.redhat.com/security/cve/CVE-2017-5376
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-5376
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-5376
-
article
https://www.mozilla.org/en-US/security/advisories/mfsa2017-02/#CVE-2017-5376
-
report
https://access.redhat.com/security/cve/CVE-2017-5378
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-5378
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-5378
-
article
https://www.mozilla.org/en-US/security/advisories/mfsa2017-02/#CVE-2017-5378
-
report
https://access.redhat.com/security/cve/CVE-2017-5380
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-5380
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-5380
-
article
https://www.mozilla.org/en-US/security/advisories/mfsa2017-02/#CVE-2017-5380
-
report
https://access.redhat.com/security/cve/CVE-2017-5383
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-5383
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-5383
-
article
https://www.mozilla.org/en-US/security/advisories/mfsa2017-02/#CVE-2017-5383
-
report
https://access.redhat.com/security/cve/CVE-2017-5386
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-5386
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-5386